CVE-2022-1899: Out-of-bounds Read in radareorg/radare2
Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/radare2to a version that resolves this vulnerability.Fixed in 5.7.0-r0
Event History
Frequently Asked Questions
What is CVE-2022-1899?
CVE-2022-1899 is an out-of-bounds read vulnerability in the GitHub repository radareorg/radare2 prior to version 5.7.0.
How severe is CVE-2022-1899?
CVE-2022-1899 is classified as critical with a severity score of 9.1.
Which software versions are affected by CVE-2022-1899?
Radare Radare2 versions up to, but excluding, 5.7.0 are affected by CVE-2022-1899.
Is there a fix available for CVE-2022-1899?
Yes, upgrading to version 5.7.0 or newer of Radare Radare2 fixes the vulnerability.
Where can I find more information about CVE-2022-1899?
You can find more information about CVE-2022-1899 at the following references: [GitHub Commit](https://github.com/radareorg/radare2/commit/193f4fe01d7f626e2ea937450f2e0c4604420e9d), [Huntr Report](https://huntr.dev/bounties/8a3dc5cb-08b3-4807-82b2-77f08c137a04).